Journey: Add BYOK to your SaaS

Best for product teams enabling end-user key custody and model choice.

1. Choose BYOK mode in Provider access modes
2. Use headless core and add UI package only when npm availability is confirmed
3. Embed KeyManager on settings page and model picker in app workflow
4. Add model allowlist policy and verify blocked/allowed behavior